Load a tcpdump as a sidecar container

Solution Verified - Updated -


Sometimes it is useful to gather pcaps from the pods of running applications / API's, but generally the images used do not include these networking tools. This tcpdump procedure will capture network details for a running application pods without needing to re-build images.

This procedure works well for OSD clusters where the cluster owner only has access to the dedicated admin role and their running applications. And is especially useful because the cluster owner does not have authorisation to run tcpdumps at the node level.

For OCP clusters, node level authorisation might be restricted or it makes sense to take the pcaps from a pod rather than a node..


  • Openshift Dedicated (OSD) v4
  • OpenShift Container Platform (OCP) 4.3 (and above)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In